CVE-2017-2594 Path Traversal in io.hawt:project
HighCVSS 7.5
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
hawtio before versions 2.0-beta-1, 2.0-beta-2 2.0-m1, 2.0-m2, 2.0-m3, and 1.5 is vulnerable to a path traversal that leads to a NullPointerException with a full stacktrace. An attacker could use this flaw to gather undisclosed information from within hawtio's root.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| io.hawt/project(Maven) | < 1.5.0 | 1.5.0 |
| io.hawt/project(Maven) | = 1.0 | No fix listed |
| io.hawt/project(Maven) | = 1.1 | No fix listed |
| io.hawt/project(Maven) | = 1.2-M1 | No fix listed |
| io.hawt/project(Maven) | = 1.2-M10 | No fix listed |
| io.hawt/project(Maven) | = 1.2-M11 | No fix listed |
| io.hawt/project(Maven) | = 1.2-M13 | No fix listed |
| io.hawt/project(Maven) | = 1.2-M14 | No fix listed |
| io.hawt/project(Maven) | = 1.2-M16 | No fix listed |
| io.hawt/project(Maven) | = 1.2-M19 | No fix listed |
| io.hawt/project(Maven) | = 1.2-M2 | No fix listed |
| io.hawt/project(Maven) | = 1.2-M20 | No fix listed |
| io.hawt/project(Maven) | = 1.2-M22 | No fix listed |
| io.hawt/project(Maven) | = 1.2-M23 | No fix listed |
| io.hawt/project(Maven) | = 1.2-M24 | No fix listed |
| io.hawt/project(Maven) | = 1.2-M25 | No fix listed |
| io.hawt/project(Maven) | = 1.2-M26 | No fix listed |
| io.hawt/project(Maven) | = 1.2-M27 | No fix listed |
| io.hawt/project(Maven) | = 1.2-M3 | No fix listed |
| io.hawt/project(Maven) | = 1.2-M4 | No fix listed |
| io.hawt/project(Maven) | = 1.2-M5 | No fix listed |
| io.hawt/project(Maven) | = 1.2-M6 | No fix listed |
| io.hawt/project(Maven) | = 1.2-M7 | No fix listed |
| io.hawt/project(Maven) | = 1.2-M8 | No fix listed |
| io.hawt/project(Maven) | = 1.2-M9 | No fix listed |
Show 74 more
| Product | Affected versions | Fixed in |
|---|---|---|
| io.hawt/project(Maven) | = 1.2.0 | No fix listed |
| io.hawt/project(Maven) | = 1.2.1 | No fix listed |
| io.hawt/project(Maven) | = 1.2.2 | No fix listed |
| io.hawt/project(Maven) | = 1.2.3 | No fix listed |
| io.hawt/project(Maven) | = 1.3.0 | No fix listed |
| io.hawt/project(Maven) | = 1.3.1 | No fix listed |
| io.hawt/project(Maven) | = 1.4.0 | No fix listed |
| io.hawt/project(Maven) | = 1.4.1 | No fix listed |
| io.hawt/project(Maven) | = 1.4.10 | No fix listed |
| io.hawt/project(Maven) | = 1.4.11 | No fix listed |
| io.hawt/project(Maven) | = 1.4.12 | No fix listed |
| io.hawt/project(Maven) | = 1.4.14 | No fix listed |
| io.hawt/project(Maven) | = 1.4.15 | No fix listed |
| io.hawt/project(Maven) | = 1.4.16 | No fix listed |
| io.hawt/project(Maven) | = 1.4.17 | No fix listed |
| io.hawt/project(Maven) | = 1.4.18 | No fix listed |
| io.hawt/project(Maven) | = 1.4.19 | No fix listed |
| io.hawt/project(Maven) | = 1.4.2 | No fix listed |
| io.hawt/project(Maven) | = 1.4.20 | No fix listed |
| io.hawt/project(Maven) | = 1.4.21 | No fix listed |
| io.hawt/project(Maven) | = 1.4.22 | No fix listed |
| io.hawt/project(Maven) | = 1.4.23 | No fix listed |
| io.hawt/project(Maven) | = 1.4.24 | No fix listed |
| io.hawt/project(Maven) | = 1.4.25 | No fix listed |
| io.hawt/project(Maven) | = 1.4.26 | No fix listed |
| io.hawt/project(Maven) | = 1.4.27 | No fix listed |
| io.hawt/project(Maven) | = 1.4.28 | No fix listed |
| io.hawt/project(Maven) | = 1.4.29 | No fix listed |
| io.hawt/project(Maven) | = 1.4.30 | No fix listed |
| io.hawt/project(Maven) | = 1.4.31 | No fix listed |
| io.hawt/project(Maven) | = 1.4.32 | No fix listed |
| io.hawt/project(Maven) | = 1.4.33 | No fix listed |
| io.hawt/project(Maven) | = 1.4.34 | No fix listed |
| io.hawt/project(Maven) | = 1.4.35 | No fix listed |
| io.hawt/project(Maven) | = 1.4.36 | No fix listed |
| io.hawt/project(Maven) | = 1.4.37 | No fix listed |
| io.hawt/project(Maven) | = 1.4.38 | No fix listed |
| io.hawt/project(Maven) | = 1.4.39 | No fix listed |
| io.hawt/project(Maven) | = 1.4.4 | No fix listed |
| io.hawt/project(Maven) | = 1.4.40 | No fix listed |
| io.hawt/project(Maven) | = 1.4.41 | No fix listed |
| io.hawt/project(Maven) | = 1.4.42 | No fix listed |
| io.hawt/project(Maven) | = 1.4.43 | No fix listed |
| io.hawt/project(Maven) | = 1.4.44 | No fix listed |
| io.hawt/project(Maven) | = 1.4.45 | No fix listed |
| io.hawt/project(Maven) | = 1.4.46 | No fix listed |
| io.hawt/project(Maven) | = 1.4.47 | No fix listed |
| io.hawt/project(Maven) | = 1.4.48 | No fix listed |
| io.hawt/project(Maven) | = 1.4.49 | No fix listed |
| io.hawt/project(Maven) | = 1.4.5 | No fix listed |
| io.hawt/project(Maven) | = 1.4.50 | No fix listed |
| io.hawt/project(Maven) | = 1.4.51 | No fix listed |
| io.hawt/project(Maven) | = 1.4.52 | No fix listed |
| io.hawt/project(Maven) | = 1.4.53 | No fix listed |
| io.hawt/project(Maven) | = 1.4.54 | No fix listed |
| io.hawt/project(Maven) | = 1.4.55 | No fix listed |
| io.hawt/project(Maven) | = 1.4.56 | No fix listed |
| io.hawt/project(Maven) | = 1.4.57 | No fix listed |
| io.hawt/project(Maven) | = 1.4.58 | No fix listed |
| io.hawt/project(Maven) | = 1.4.59 | No fix listed |
| io.hawt/project(Maven) | = 1.4.6 | No fix listed |
| io.hawt/project(Maven) | = 1.4.60 | No fix listed |
| io.hawt/project(Maven) | = 1.4.61 | No fix listed |
| io.hawt/project(Maven) | = 1.4.62 | No fix listed |
| io.hawt/project(Maven) | = 1.4.63 | No fix listed |
| io.hawt/project(Maven) | = 1.4.64 | No fix listed |
| io.hawt/project(Maven) | = 1.4.65 | No fix listed |
| io.hawt/project(Maven) | = 1.4.66 | No fix listed |
| io.hawt/project(Maven) | = 1.4.67 | No fix listed |
| io.hawt/project(Maven) | = 1.4.68 | No fix listed |
| io.hawt/project(Maven) | = 1.4.7 | No fix listed |
| io.hawt/project(Maven) | = 1.4.8 | No fix listed |
| io.hawt/project(Maven) | = 1.4.9 | No fix listed |
| hawtio | <= 1.4.68 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- access.redhat.com third-party-advisory
- bugzilla.redhat.com issue-tracking third-party-advisory
- github.com
- 95793 third-party-advisory vdb-entry